9f655e9caaf36e3d3a1244bb73138aca_JaffaCakes118

General

Target
9f655e9caaf36e3d3a1244bb73138aca_JaffaCakes118
Size 6.0MB
Sample240611-yy1ddazepc
SHA256 486708ccf64e5b3e6a73a4117d070db505a022a17e9d83db8ff0a602958232f9
MD5 9f655e9caaf36e3d3a1244bb73138aca
SHA1 8bda06700d0e80858d9eb10f56af21288c51d7ab
SHA512 e41025d7db0e4ef995e143cd83147ddfad58e645b56de11cf7b7485d3c1e57941326bf446b164b10e75930ac9416f6fe69d8d391c0422b879a64dc69a285880e
SSDEEP 98304:UOhSKgf46VQ/U6Z23D5Uj8M6gwDbDKZLkLZkfkvda8IQm1h01s6VRB/Ro:UlSDBW6jjLaZ4cdzK819C
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

9f655e9caaf36e3d3a1244bb73138aca_JaffaCakes118

.apk 6.0MB

9f655e9caaf36e3d3a1244bb73138aca_JaffaCakes118

SHA256 486708ccf64e5b3e6a73a4117d070db505a022a17e9d83db8ff0a602958232f9
MD5 9f655e9caaf36e3d3a1244bb73138aca
SHA1 8bda06700d0e80858d9eb10f56af21288c51d7ab
SHA512 e41025d7db0e4ef995e143cd83147ddfad58e645b56de11cf7b7485d3c1e57941326bf446b164b10e75930ac9416f6fe69d8d391c0422b879a64dc69a285880e
SSDEEP 98304:UOhSKgf46VQ/U6Z23D5Uj8M6gwDbDKZLkLZkfkvda8IQm1h01s6VRB/Ro:UlSDBW6jjLaZ4cdzK819C
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.jhl.guandu.xt

com.qk.plugin.js.shell.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW

com.qk.plugin.js.shell.MainActivity

com.xiantu.paysdk.activity.TransparencyActivity

com.xiantu.paysdk.activity.MenuActivity

com.xiantu.paysdk.activity.AccountActivity

com.xiantu.paysdk.activity.MessageActivity

com.xiantu.paysdk.activity.CustomerActivity

com.xiantu.paysdk.activity.GameActivity

com.xiantu.paysdk.activity.WalletActivity

com.xiantu.paysdk.activity.ChangePwdActivity

com.xiantu.paysdk.activity.BindPhoneActivity

com.xiantu.paysdk.activity.TrumpetManageActivity

com.xiantu.paysdk.activity.VerifiedActivity

com.xiantu.paysdk.activity.TicketListActivity

com.xiantu.paysdk.activity.XTChoosePayActivityRecharge

com.xiantu.paysdk.activity.XTChoosePayActivityOrder

com.xiantu.paysdk.activity.XTChooseVoucherActivity

com.xiantu.paysdk.activity.XTPayActivity

com.xiantu.paysdk.activity.SetLevel2PwdActivity

com.xiantu.paysdk.activity.MyOrderListdActivity

com.xiantu.paysdk.activity.NoticeActivity

com.xiantu.paysdk.activity.NoticeDetActivity

com.xiantu.paysdk.activity.ActiveActivity

com.xiantu.paysdk.activity.ActiveDetActivity

com.xiantu.paysdk.activity.FeedBackActivity

com.xiantu.paysdk.activity.FeedBackDetActivity

com.xiantu.paysdk.activity.QuestionInfoListActivity

com.xiantu.paysdk.activity.GiftActivity

com.xiantu.paysdk.activity.MovableActivity

com.xiantu.paysdk.activity.AdvisoryActivity

com.xiantu.paysdk.activity.RecommendActivity

com.xiantu.paysdk.activity.GiftInfoActivity

com.xiantu.paysdk.activity.MovableInfoActivity

com.xiantu.paysdk.activity.AdvisoryInfoActivity

com.xiantu.paysdk.activity.RecommendInfoActivity

Android Permissions

9f655e9caaf36e3d3a1244bb73138aca_JaffaCakes118

Permissions

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_CHECKIN_PROPERTIES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.BLUETOOTH

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

ndroid.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

File Explorer

9f655e9caaf36e3d3a1244bb73138aca_JaffaCakes118

com.qk.plugin.js.shell.SplashActivity

com.qk.plugin.js.shell.MainActivity

com.xiantu.paysdk.activity.TransparencyActivity

com.xiantu.paysdk.activity.MenuActivity

com.xiantu.paysdk.activity.AccountActivity

com.xiantu.paysdk.activity.MessageActivity

com.xiantu.paysdk.activity.CustomerActivity

com.xiantu.paysdk.activity.GameActivity

com.xiantu.paysdk.activity.WalletActivity

com.xiantu.paysdk.activity.ChangePwdActivity

com.xiantu.paysdk.activity.BindPhoneActivity

com.xiantu.paysdk.activity.TrumpetManageActivity

com.xiantu.paysdk.activity.VerifiedActivity

com.xiantu.paysdk.activity.TicketListActivity

com.xiantu.paysdk.activity.XTChoosePayActivityRecharge

com.xiantu.paysdk.activity.XTChoosePayActivityOrder

com.xiantu.paysdk.activity.XTChooseVoucherActivity

com.xiantu.paysdk.activity.XTPayActivity

com.xiantu.paysdk.activity.SetLevel2PwdActivity

com.xiantu.paysdk.activity.MyOrderListdActivity

com.xiantu.paysdk.activity.NoticeActivity

com.xiantu.paysdk.activity.NoticeDetActivity

com.xiantu.paysdk.activity.ActiveActivity

com.xiantu.paysdk.activity.ActiveDetActivity

com.xiantu.paysdk.activity.FeedBackActivity

com.xiantu.paysdk.activity.FeedBackDetActivity

com.xiantu.paysdk.activity.QuestionInfoListActivity

com.xiantu.paysdk.activity.GiftActivity

com.xiantu.paysdk.activity.MovableActivity

com.xiantu.paysdk.activity.AdvisoryActivity

com.xiantu.paysdk.activity.RecommendActivity

com.xiantu.paysdk.activity.GiftInfoActivity

com.xiantu.paysdk.activity.MovableInfoActivity

com.xiantu.paysdk.activity.AdvisoryInfoActivity

com.xiantu.paysdk.activity.RecommendInfoActivity

com.xiantu.paysdk.server.XTHFloatService

Android Permissions

9f655e9caaf36e3d3a1244bb73138aca_JaffaCakes118